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Abstract 

It is shown that determining whether a quantum computation has 
a non-zero probability of accepting is at least as hard as the polyno- 
mial time hierarchy. This hardness result also applies to determining 
in general whether a given quantum basis state appears with nonzero 
amplitude in a superposition, or whether a given quantum bit has pos- 
itive expectation value at the end of a quantum computation. This 
result is achieved by showing that the complexity class NQP of Adle- 
man, Demarrais, and Huang [jlj, a quantum analog of NP, is equal to 
the counting class coC = P. 

1 Introduction 

This decade has seen renewed interest and great activity in quantum com- 
puting. This interest has been spurred by the clear formal definition of 
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the quantum computing model and by the surprising discovery that some 
important computational problems which may be classically infeasible are 
feasible using quantum computers. One central result is Shor's bounded- 
error polynomial-time algorithms for discrete logarithm and for integer fac- 
toring on both a quantum Turing machine |T(| and (equivalently) quantum 



circuits [17|. This opens the possibility that if such machines can be con- 
structed, or effectively simulated, then one can rapidly factor large integers 
and compromise a good deal of modern cryptography 

While the main research focus has been on finding efficient quantum 
algorithms for hard problems, attention has also been paid to determining 
the strength of quantum computation vis-a-vis its classical (probabilistic) 
counterpart |7|, J5|. In this paper we take a further step in this direction 
by proving that testing for non-zero acceptance probability of a quantum 
machine is classically an extremely hard problem. In fact, we prove that this 
problem — which we call QAP ( "quantum acceptance possibility" ) and which 
is complete for NQP (a quantum analog of NP) — is hard for the polynomial- 
time hierarchy. This is done by showing that NQP is precisely the exact 



counting class [ 23 1 coC=P: 



Theorem 1.1 NQP = coC=P. 



coC=P, in turn, is hard for PH under randomized reductions [20 
and may still be hard even if P = NP. Thus 

Corollary 1.2 The problem of determining if the acceptance probability of 
a quantum computation is non-zero (QAP) is hard for the polynomial time 
hierarchy under polynomial-time randomized reductions. 



We will see in Section |4| that Theorem 1.1 is mostly insensitive to the 
set of transition amplitudes we allow in our model of quantum computation. 
The equation holds whether we allow arbitrary algebraic numbers as tran- 



sition amplitudes (Theorem 4.1 ) or we restrict transition amplitudes to be 



in a small finite set of rational numbers as described by Adleman, et al. 



(Theorem A.l). We will assume throughout the paper that transcendental 

amplitudes are not allowed. 

The class NQP was originally defined by Adleman, Demarrais, and Huang 
who showed that NQP C PP. The sharper upper bound NQP C coC=P 

is implicit in their proof and a recent result of Fortnow and Rogers ]l3| . The 



main contribution of this paper is to obtain the lower bound coC=P C NQP. 
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Adleman et al. also asked if EQP (the quantum analog of P) and NQP are 
the same. Our result implies that EQP = NQP is equivalent to the collapse 
of the counting hierarchy (see Section |3|) . 

Graph Nonisomorphism |l3| is an example of a problem in coC=P that 
is not known to be in NP. Theorem |Ll] shows that there is a quantum 
machine that takes two graphs as input and accepts with probability zero 
exactly when the two graphs are isomorphic. 

We prove Theorem 1.1 and Corollary 1.2 in Section ^. The proof can be 
easily adapted to show hardness of determining whether any given quantum 
bit must be zero (or one) with certainty in a quantum computation, or more 
generally, whether some given quantum state shows up in a superposition 
with nonzero amplitude. Both of these questions are equivalent to QAP, 
and therefore also NQP-complete. 

Determining non-zero acceptance probability of a classical machine is 
complete for NP, but determining exact accepting probability is much harder: 
it is hard for #P. By analogy, one might have hoped QAP would be signifi- 
cantly easier than the problem of determining the exact accepting probabil- 
ity of a quantum computation, and possibly even to locate QAP within the 
polynomial hierarchy. Our work shows that this is probably not the case as 
if QAP is in the polynomial hierarchy then this hierarchy collapses. 

Work of Bennett et al. [|| and recently of Fortnow and Rogers [13| has 
suggested that quantum computation with bounded error probability (BQP) 
is most likely unable to solve NP-hard problems. Combined with our result, 
this implies that BQP is even less likely than PH to contain QAP. We take 
this as evidence that quantum computers, even if implemented, will be un- 
able to amplify exponentially small probabilities to such an extent that they 
become reliably detectable by means of repeated experiments and observa- 
tions. This difference between bounded error computation and determining 
non-zero acceptence probability exists classically as well; in the classical case, 
bounded error computation corresponds to BPP and determining non-zero 
acceptence probability corresponds to NP. 

Our work is part of an on-going effort to compare the power and lim- 
itations of quantum computers with those of more well-studied classical 
computers. In the classical case, one attempts to classify problems accord- 
ing to their intrinsic computational difficulty (complexity). For example, 
the class P of problems decidable by deterministic computations running in 
time bounded by a polynomial in the size of the input (i.e., polynomial time) 
is widely regarded as capturing feasible, exact computations; the class BPP, 
defined similarly except using probabilistic machines, captures the notion of 
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feasible probabilistic decidability. 

Over time, complexity theorists have built up elaborate frameworks of 
classes describing the power of various models of computation. Of these 
frameworks, the best known is the polynomial hierarchy (PH), the levels of 
which consist of problems definable by (a fixed constant number of) alter- 
nating polynomially bounded versions of the quantifiers 3 and V in front of 
a P predicate. The class NP, containing the well-known NP-complete prob- 
lems, is the first level of this hierarchy. It is widely believed that PH does 
not collapse, i.e., that it is a proper hierarchy with each level distinct from 
all other levels. This implies and generalizes the conjecture that P 7^ NP. 
For a good introduction to complexity theory see, for example, Balcazar et 
al. §. 

Problems related to counting, e.g., "How many satisfying truth assign- 
ments are there to a given Boolean formula?" , have also been widely studied 
(see [15, 12] for example). It has been found [20, 21 1 that there are counting 
problems at least as difficult as any problem in PH, and thus (likely) much 
more difficult than any NP problem. 

The relationship between quantum computing and counting problems 



has been previously observed [Qq, 13, pj. Our result further strengthens the 



connections between quantum computation and counting complexity and 
strengthens previous results in this area by providing the first example of a 
quantum computation problem whose complexity can be precisely charac- 
terized in terms of a counting class. 

The essential distinction between classical probabilistic models and quan- 
tum machines, and the true source of power in the latter, rests in the fact 
that the states in a quantum superposition can cancel each other, a phe- 
nomenon known as destructive interference. Since many states can be in- 
volved in such a cancellation, certain measurable properties of the quantum 
state can be very sensitive to the number of classically accepting paths. Our 
result, while using and extending the resulting connection between quantum 
computation and counting problems, also serves to clarify it. 



2 Probabilistic and Quantum Computation 

We let S = {0, 1}. We are interested in decision problems (languages) over 
E*. Of particular interest are the language 

QAP = {{M, x, 0*) I M encodes a quantum machine that has 

non-zero probability of accepting x in t steps}, 
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and the class NQP, which will be defined at the end of this section. 

We review here briefly the models of classical probabilistic computation 
and quantum computation that we will employ in this paper. Our devel- 
opment is based on Turing machines, but can just as easily be based on 
quantum circuits |j, which are polynomially equivalent to quantum Turing 
machines [25]. See the references for more details regarding the models used 
here []l8| as well as equivalent formulations f§. Those who are already fa- 
miliar with Turing machine models for quantum computation can skip to 
the definition of NQP at the end of this section. 

A classical probabilistic computation can be viewed as a tree. Each 
node in the tree is labeled with a configuration (instantaneous description 
of tape contents, head location and internal state) of the Turing Machine. 
Edges in the tree are labeled with real numbers in the interval [0, 1], which 
correspond to the probability of a transition from the parent configuration 
to the child configuration. Each level of the tree represents one time step 
(hereafter referred to as a step). Throughout this paper we will consider 
only computations (both classical and quantum) for which the depth of the 
tree (time) is polynomial in the length of the input. Probabilities can be 
assigned to a node by multiplying the probabilities along the path from the 
root to that node. The probability of the computation being in configuration 
c at time t is the sum of the probabilites assigned to each node at level t 
that has been assigned configuration c. 

In order for such a tree to represent a probabilistic computation, it must 
be constrained by locality, and classical probability. Locality constraints re- 
quire that the probability assigned to the edge from one node to another 
correspond to the action of one step of a probabilistic Turing machine, so in 
particular, the probability (1) is non-zero only if a Turing machine could ac- 
tually make such a transition (thus for example, the only tape cells that can 
change are the ones which were under a head in the parent configuration), 
and (2) depends only on that part of the configuration which determines 
the action of the machine, and not on the rest of the configuration or the 
location in the tree. Probability constraints require that the sum of all prob- 
abilities on any level is always 1. It is equivalent to require that the sum of 
the probabilities on the edges leaving any node equal 1. For the purposes 
of complexity considerations, it is usually sufficient to consider probabilities 
from the set {0, ^, 1}. If one considers the probabilistic machine to be a 
Markov chain, the entire computation can be represented by a matrix which 
transforms vectors of configurations into vectors of configurations, with the 
coefficients corresponding to probabilities. 
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The probability that a machine accepts on input x after t steps is 
Pr [configuration c at step t | configuration cq at step 0] 

where r acc is the set of all accepting configurations and cq is the initial 
configuration corresponding to an input x. Note that the class NP can be 
defined in terms of probabilistic machines: A language, L, is in NP if and 
only if there is a probabilistic machine M and a polynomial p such that 

x G L <^=^ Pr[M accepts x in steps] ^ 

A quantum computation can be similarly represented by a tree, only 
now the constraints are locality and quantum probability. In the quantum 
computation, the edges are assigned algebraic (see Section ||) complex- valued 
probability amplitudes. The amplitude of a node is again the product along 
the path to that node. The amplitude associated with being in configuration 
c at step t is the sum of the amplitudes of all nodes at level t labeled 
with c. The probability is the squared absolute value of the amplitude. 
A configuration c uniquely corresponds to a quantum state, denoted by 
|c). The states |c), for all configurations c, form an orthonormal basis in a 
Hilbert space. At each step we consider a quantum computation to be in a 
superposition \cp) of basis states, and write this as 

cer 

where a c is the amplitude of |c). Since the basis states |c) are mutually 
orthonormal, the amplitude a c of |c) in a superposition \ip) is the inner 
product of |c) with \ip), denoted by (c | ip). The probability of accepting is 
defined as for the probabilistic computation. 

Once again the sum of the probabilities on any level must be 1 (Yl \ a c\ 2 = 
1). As before, a restricted set of amplitudes for local transitions is sufficient, 
namely rational numbers or square roots of rational numbers. In fact, the 
machine we construct will only use amplitudes in {0, ±-^, ±l}.It is not, 
however, sufficient to require that the sum of the squares of the amplitudes 
leaving any node be 1. This is due to the effects of interference among 
the configurations. A quantum computation can also be represented by a 
matrix which transforms quantum states into quantum states (represented 
as vectors in a Hilbert space with basis states |c), i.e., states of form \<p) 
as above). To satisfy the constraints of quantum probability, this matrix 



6 



must be unitary (its inverse is its conjugate transpose). In the case where 
all amplitudes are real numbers, a matrix is unitary if and only if it is 
orthogonal. 

The class NQP is defined, as in analogously to the class NP by re- 
placing the probabilistic machine with a quantum machine: 

Definition 2.1 A language L is in NQP if and only if there is a quantum 
Turing machine Q and a polynomial p such that 

x £ L <^=^ Pr[Q accepts x in p(\x\) steps] 7^ 

It is not hard to see that QAP is hard for NQP via a standard argument: 



given L, Q, and p as in Definition |2.l| above, we reduce L to QAP by mapping 
input x to (Q, x, 0P(l 2 D). We also have QAP G NQP as a consequence of the 
construction of an efficient universal quantum machine ||. Therefore, QAP 
is complete for NQP. 

One might entertain other possibilities for defining a quantum analog of 
NP. One justification for our definition is that NQP bears the same relation 
to BQP as the class NP does to BPP. As BQP plays a central role in efficient 
quantum computation, this seems like a natural definition to study. Two 
other possible quantum analogs to NP would be the class 3EQP, i.e., the 
class of sets {S\ there is a polynomial p and an EQP machine M such that 
for all strings x, x G S iff there is a string y with |y| < such that 

M accepts (x,y)} and the class 3BQP, defined similarly. Each of these 
definitions is analogous to that of NP as 3 P. 

It is not clear whether any two of the three classes NQP, 3 EQP, and 
3BQP are the same. For example, it is not known if P = EQP, but if 
P = EQP and the polynomial hierarchy separates, then 3 EQP = NP 7^ NQP. 



3 Main Result 

Theorem |3.2| shows how to design quantum machines for which the resulting 
amplitude of the unique accepting state is closely related to some given 
function in the class GapP. Before giving the proof, we define this class of 
functions. 



Definition 3.1 Given any L C £*, let L x = {y £ T,* \ {x,y) £ L}. A 
function f : {0,1}* — > Z is in GapP if there is a language L in P and an 
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integer k such that, 

fix) = x± y > 

where n = \x\. 

This is equivalent to saying that a GapP function is the difference (gap) 
between the number of accepting paths and the number of rejecting paths 
in some nondeterministic polynomial time computation. More information 



can be found in the references [10] about the intuition behind this definition 



and the basic properties of the class GapP. 

Now we are ready to prove the technical theorem on which Theorem |L1 
rests. This result can be obtained as a corollary of Theorem 8.9 of Bernstein 
and Vazirani || regarding Fourier sampling. Our proof, which uses the same 
techniques, is more direct, and will be used to generalize a result of Fortnow 
and Rogers which is proved in the appendix of this paper (see Section 

Theorem 3.2 For any f £ GapP, there is a ptime quantum Turing machine 
Q and a polynomial p such that, for all x of length n, 

fix) 2 

Pr[Q(x) accepts] - 



2p(n) 



In fact, for all x, Q(x) has a unique accepting configuration which it reaches 
with probability amplitude exactly —f(x)/2 p ( n ^ 2 . 

Proof Sketch: Our proof directly uses techniques of Simon [ill] and 
Deutsch and Jozsa |J. Let k G N and let L C S* be a set in P such that 
for all x of length n, 

fix) = -• 



Let M be a polynomial time machine recognizing L, so that for all (x,y), 
(x,y) G L iff M accepts on input (x,y). Fix an input x of length n and 
let m = n k . When our quantum machine Q takes x on its read-only input 
tape, it will use m + 1 bits of a special work tape t. It will use other work 
tapes only for deterministic, reversible computation. We denote a possible 
configuration of Q(x) as a basic state 

\x,y,b) 
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where x is the contents of the input tape and y, b are the contents of t (y is a 
vector of m bits, and b is a single bit). We suppress the other configuration 
information, i.e., the state of Q, the positions of the heads, and the contents 
of the other work tapes. This other information is irrelevant because at all 
important steps of the computation, the same state and head positions of 
Q will appear in all configurations in the superposition, and all other work 
tapes besides t will be empty. 

Initially, y = and b = 0. Q first scans over all the bits of y and applies 
to each bit what has become a useful and popular local transition rule 

|o>h+-L(|o> + |i» 
|i> -> -L(|o> - 

In general, scanning an arbitrary state \x,y,b) in this way yields 

\x,y,b) ^ ^(-i) y ' y 'k,y',&), 

y' 

where y • y' is the dot product Y^iLi ViVi °f the bit vectors y and y'. The 
above transformation || [l8| is called the Fourier transform of the basis 
\x,y, b). Thus Q scanning the first m bits of the tape t corresponds to the 
global transition 

l x '°'°) ^ W2 El^y* )- 

z y 

Q then simulates the deterministic computation of M on input (x, y) in 
a reversible manner [||, |4j, using other work tapesQ. Let b y be the one-bit 
result of the computation of M(x,y). Q sets b = b y . The superposition is 
now 

z y 

Afterwards, Q repeats the scan it performed at the beginning, using the 
same local transformation rule, except that it now includes all m + 1 bits, 

1 This computation is also done obliviously so that the internal state and tape head 
position of the machine is the same for all components of the superposition at any given 
time. If we had used quantum circuits for the proof, this technicality would have been 
unnecessary. 
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including b, in the scan. This leads Q into a new superposition 

V2 y y',6' 
We now consider the coefficient of \x,0, 1) in \ip): 

= F(-i) by 

Finally, Q deterministically looks at the m + 1 bits of the tape t. If it sees 
0, 1 it accepts; otherwise, it rejects. 

Thus | a;, 0,1} is the unique accepting configuration of Q, and it has 
probability amplitude 



V2 2 r 

which implies the theorem by setting p(n) = 2m — 1 = 2n k — 1. q 

A converse to Theorem [T^ follows directly from work of Fortnow and 
Rogers [13]. Fortnow and Rogers' result is given only for quantum machines 
that use rational amplitudes. Their proof can be easily modified to obtain 
the following. In Section ^] we also give a generalization of this theorem to 
arbitrary algebraic amplitudes. 

Theorem 3.3 (Fortnow, Rogers) For any ptime quantum machine M 
(with transition amplitudes that are products of rational numbers and the 
square root of a fixed integer), there is a GapP function f , a natural number 
d, and a polynomial p such that M accepts any input x with probability 
exactly f(x)/dP^. 



Combining Theorems |3.2| and |3.3| provides an exact characterization of 
NQP in terms of a counting class known to be hard for PH. 

Definition 3.4 A language L is said to be in the class C=P if there is a 
GapP function f such that for any x, x £ L if and only if f(x) = 0. The 
class coC=P is the set of all languages with complements in C=P. 
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By Theorems |3^ and |3,3| , a language L is in C=P (resp., coC=P) if and 
only if there is a polynomial-time quantum Turing machine Q such that for 
any x, 

x G L <^=^ Pv[Q(x) accepts] = (resp., Pr[Q(x) accepts] / 0). 



Thus NQP = coC=P, so Theorem [D] is a corollary of Theorems [T^ and [D^ 



It is known that C=P is hard for the polynomial hierarchy under ran- 
domized reductions pl| , |i~9fl . Thus Corollary (QAP is hard for PH under 
randomized reductions) follows. 

Hence if QAP is anywhere in PH, then PH collapses; in fact, the counting 
hierarchy also collapses.^] Combining our results with those of Fortnow and 
Rogers @, we find that QAP G BQP (or QAP G EQP) also implies the 
collapse of the counting hierarchy. 



4 Robustness of NQP 

In our definition of NQP we assume that the probability amplitudes are 
algebraic. In this section we want to explore briefly the extent to which this 
assumption is significant. Let NQP5 be the class defined like NQP, but with 
amplitudes taken from the set S. So NQP = NQPq-, where Q is the algebraic 
complex numbers. Similar notation applies to other quantum classes. 

Adleman et al. [|| show that, although BQPc is uncountable, BQPq- = 
BQPq = BQP^ ^/ 5 ±4 / 5 ± iy, and so the latter class provides a reason- 
able, robust definition for BQP. The proof of Theorem |3.2| shows that 
coC=P C NQPj ± j_ _ tl |, and it can be modified to show that coC=P C 

NQP{o,±3/5,±4/5,±i} as weu - A proof of this modified result is given in the 



appendix. These inclusions together with Corollary 4.2 below show that 



NQPq = NQP|p -1- 3/5 -1-4/5 ±1 | = coC=P, generalizing a theorem of Fortnow- 



Rogers (Theorem 3.3). 

We use the following theorem, the main theorem for this section, which 
unifies and generalizes some of the results of Adleman, et al. |l]] given above. 
Our proof is somewhat similar to theirs. We begin by recalling some basic 
facts from algebra. Let a±, . . . ,a n be complex numbers. Let Q(aj, . . . , a n ) 
be the smallest subfield of C containing a%, . . . , a n . A basic fact of abstract 



2 This is a hierarchy built over the class PP instead of NP. The counting hierarchy 
was originally defined in terms of counting quantifiers |2^] . The assertion follows from an 
alternative characterization in terms of oracles p2|. 
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algebra is that a%, . . . , a n are all algebraic (over Q) iff Q(«i, . . . , a n ) (as a 
vector space over Q) is finite dimensional. 

Theorem 4.1 Let M be any quantum accept/reject TM that has algrebraic 
transition amplitudes and runs in time t{n). Then there are positive integers 
s and D, real algebraic numbers a±, . . . ,a s linearly independent over Q ; and 
GapP functions fi, . . . , f s , such that for any input x of length n, 

Pr[M(x) accepts] = JLj £ fjfr, 0' (n) K 

Moreover, all the ctj are in the field extension of Q generated by the transi- 
tion amplitudes of M. 

Proof Sketch: The transition amplitudes mentioned in M (not necessarily 
real), together with their complex conjugates, generate a field F that has 
finite dimension over Q and that is closed under complex conjugate. Let 
Pi, ... , f3 m be a basis for F. Every element of F can be expressed uniquely 
as a linear combination of the Furthermore, there are unique rationals 
{li,j,k}i<i,j,k<m such that PiPj = J2k%j,kPk- Hence for any two elements 
a = a-ifii and b = J2 hPi of F, the coefficient of 0k i n Q-b is J2i J2j aibjqij^k- 
Now choose a±, . . . ,a s to be a basis of F n R over Q such that for each i 
we can write 

s 

Re(Pi) = ^CijOj, 

3=1 

where the Cjj are all integers. 

We may assume WLOG that the %j,k are an integers. If not, we redefine 
the basis to clear all the denominators: let i be the 1cm of all denominators 
appearing in the ftj^. Then redefine the by (3[ = ify. Then, = 
J2k^Qi,j,kPk^ so the coefficients are now all integers. 

Fix any input x, and let U be the global unitary 1-step transition matrix 
for M{x). It is clear that each entry of U is in F, and moreover there is an 
integer d and an integer-valued FP function u such that the (i,j)th entry of 
U is 

2 m 

(U)ij = - ^2 n ( x ' 3, k )Pk ■ 
a k=i 

The proof now proceeds as in the proof of lemma 3.2 of Fortnow and 
Rogers [p^j , except that here we add and multiply elements of F. Multi- 
plying U times itself then reduces to obtaining uniform exponential sums 
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of polynomial products of the u(x, i, j, fc)'s and qij,k- But GapP is closed 
under these operations. So there are GapP functions gi, ... ,g m such that 
the (i, j)th entry of U is 

2 m 

(U\j = J^dkix, 0\ k)/3 k . 
a k=i 

Now take t = t(n) to be the running time of M(x). The acceptance proba- 
bility is the sum of squared absolute values of all "accepting" entries of U t S, 
where S is the column vector representing the basic quantum state of the 
initial configuration of M{x). (Note that squaring an absolute value is just 
a field operation in F, since F is closed under complex conjugate.) Again 
using the closure properties of GapP, there are GapP functions hi, . . . , h m 
such that 

m 

Pr[M(x) accepts] = — t ^ h(x, 0*)#, 

i=l 

where D = d 2 . Since this quantity is real, we have 

Pi[M(x) accepts] = — ^ hi(x, 0*)Re(/?i) 

i=i 

^ m s 

^ »=i i=i 
i s 

where for each j, we define 

m 

fj&Qt) = Y,c i , j h i {x,O t ). 

i=l 

It follows from the closure properties of GapP that the fj are all in GapP. 
This proves the theorem. | — | 

Corollary 4.2 (implicit in [jl[]) For M as above, the set 

{x | Pi[M(x) accepts] = 0} 

is in C=P. Thus NQPq C coC=P. 
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Proof. Since the ctj are all linearly independent over Q, the probability is 
zero iff all the fj(x) are zero, iff f(x) = where 



/(*) = ]T[/^)] 2 - 

3=1 

The function / is clearly in GapP. q 



The proof of Theorem 4.1 actually yields a more general result regarding 
probability amplitudes, which may be of independent interest. As with 
Adleman et al, we simply choose a single primitive element for the field 
extension of Q generated by the transition amplitudes of the machine in 
question. 



Theorem 4.3 Let Q be any quantum TM whose transition amplitudes are 
all algebraic numbers. There exists an algebraic number (3, positive integers 
d and k, and GapP functions fi(x, u, s) for alii, < i < k such that, for any 
input x, time i £ N, and basis state \s) of Q(x), the probability amplitude 
of \s) in the quantum state of Q(x) after running t steps is exactly 

i]T/ 4 (x,(M/?\ 

Furthermore, (3 is a primitive element with degree k of the field extension of 
Q generated by the transition amplitudes ofQ. 



5 Conclusion 

One may ask if a polynomial-time probabilistic Turing machine has a non- 
zero acceptance probability. This problem is NP-complete. QAP is the 
analogous problem in the quantum setting and it is NQP-complete. As we 
have seen in this paper, NQP = coC=P, which is a much harder class than 
NP, and our characterization shows that QAP is nowhere in the polyno- 
mial hierarchy unless the polynomial hierarchy and the counting hierarchy 
collapse and are equal. 

We interpret this as a lower bound on the capabilities of quantum com- 
puters. Just as it is unlikely that an NP machine's acceptance probability 
can be amplified (i.e., that NP C BPP), so is it unlikely that a quantum ma- 
chine's acceptance probability can be amplified (i.e., coC=P C BQP), and 
even more unlikely that it can be amplified classically (i.e., coC=P C BPP). 
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To our knowledge, this is the first hardness result of this nature regarding 
quantum computation. The result also shows how destructive interference 
can lead to vastly different behaviors for acceptance probabilities in classical 
and quantum machines. 

Note that the results here show that if NQP C BQP, then the counting 
hierarchy collapses to PP. It would be interesting to see if it collapses even 
farther (say, to BQP). This would give us a better understanding of how 
much harder NQP is than BQP. 



Acknowledgements 

The work of S. Fenner was supported in part by the NSF under grant NSF- 
CCR-95-01794. The work of S. Homer was supported in part by the NSF 
under grant NSF-CCR-94-00229. The work of R. Pruim was done while 
visiting the Computer Science Department at Boston University. We thank 
C. Pollett, J. Watrous and the referees for helpful comments. 

An earlier version of this paper appeared in the Sixth Italian Conference 
on Theoretical Computer Science, October, 1998 [11 j. 



References 

[1] L. Adleman, J. DeMarrais, and M. Huang. Quantum comput ability. 
SIAM Journal on Computing, 26:1524-1540, 1997. 

[2] J. L. Balcazar, J. Diaz, and J. Gabarro. Structural Complexity I, volume 
11 of EATCS Monographs on Theoretical Computer Science. Springer- 
Verlag, 1988. 

[3] C. H. Bennett, E. Bernstein, G. Brassard, and U. Vazirani. Strengths 
and weaknesses of quantum computation. SIAM Journal on Computing, 
26:1510-1523, 1997. 

[4] P. A. Benioff. Quantum mechanical hamiltonian models of turing ma- 
chines. Journal of Statistical Physics, 29:515-546, 1982. 

[5] E. Bernstein and U. Vazirani. Quantum Complexity Theory. SIAM J. 
Comp., 26:141-1473, 1997. 



15 



[6] A. Bcrthiaume. Quantum computation. In L. Hemaspaandra and 
A. L. Selman, editors, Complexity Theory Retrospective II, chapter 2, 
pages 23-50. Springer- Verlag, 1997. 

[7] A. Berthiaume and G. Brassard. The quantum challenge to structural 
complexity theory. In Proceedings of the 7th IEEE Structure in Com- 
plexity Theory Conference, pages 132-137. IEEE, 1992. 

[8] D. Deutsch. Quantum theory, the church-turing principal, and the uni- 
versal quantum computer. In Proceedings of the Royal Society of Lon- 
don, pages 97-117, 1985. 

[9] D. Deutsch and R. Jozsa. Rapid solutions of problems by quantum 
computation. In Proceedings of the Royal Society of London, pages 553- 
558, 1992. 

[10] S. Fenner, L. Fortnow, and S. Kurtz. Gap-definable counting classes. 
Journal of Computer and System Sciences, 48(1): 116-148, 1994. 

[11] S. Fenner, F. Green, S. Homer and R. Pruim. Quantum NP is Hard 
for PH. In Proceedings of the Sixth Italian Conference on Theoretical 
Computer Science, World-Scientific, pages 241 - 252, 1998. 

[12] L. Fortnow. Counting Complexity. In L. Hemaspaandra and A. L. Sel- 
man, editors, Complexity Theory Retrospective II, chapter 4, pages 81- 
107. Springer- Verlag, 1997. 

[13] L. Fortnow and J. Rogers. Complexity limitations on quantum compu- 
tation. In Proceedings of the 13th IEEE Conference on Computational 
Complexity, pages 202-209. IEEE, 1998. 

[14] J. Kobler, U. Schoning and J. Toran. The Graph Isomorphism Problem: 
Its Structural Complexity. Birkhauser. 1993. 

[15] U. Schoning. The Power of Counting. In A. L. Selman, editor, Com- 
plexity Theory Retrospective, chapter 8, pages 204-223. Springer- Verlag, 
1990. 

[16] P. W. Shor. Algorithms for quantum computation: Discrete logarithms 
and factoring. In Proceedings of the 35th IEEE Symposium on Founda- 
tions of Computer Science, pages 124-134. IEEE, 1994. 



16 



[17] P. W. Shor. Polynomial-time algorithms for prime number factoriza- 
tion and discrete logarithms on a quantum computer. SIAM J. Comp., 
26:1484-1509, 1997. 

[18] D. Simon. On the power of quantum computation. SIAM Journal on 
Computing, 26:1474-1483, 1997. 

[19] J. Tarui. Probabilistic polynomials, AC^ ) functions and the 
polynomial-time hierarchy. Theoretical Computer Science, 113:167-183, 
1993. 

[20] S. Toda. PP is as hard as the polynomial-time hierarchy. SIAM Journal 
on Computing, 20(5):865-877, 1991. 

[21] S. Toda and M. Ogiwara. Counting classes are at least as hard as the 
polynomial-time hierarchy. SIAM Journal on Computing, 21(2):316- 
328, 1992. 

[22] J. Toran. Complexity classes defined by counting quantifiers. J. Assoc. 
Comput. Mach., 38(3):753-774, 1991. 

[23] K. Wagner. The complexity of combinatorial problems with succinct 
input representation. Acta Informatica, 23:325-356, 1986. 

[24] J. Watrous. Private communication. 1997. 

[25] A. C.-C. Yao. Quantum circuit complexity. In Proceedings of the 34th 
IEEE Symposium on Foundations of Computer Science, pages 352-361, 
1993. 



A Appendix 



In this appendix, we show that Theorem |3.2| also holds for quantum machines 

-3 ±4 

'5' ^5' 



that use amplitudes in the set R = {0, ±|, ±|, ±1}. This result was first 



suggested to us by J. Watrous |2j]. 



Theorem A.l For any f £ GapP, there is a ptime quantum Turing ma- 
chine Q with transition amplitudes in R and a polynomial p such that, for 
all x of length n, 

Pr[Q(z) accepts] = & p(n) f(x) 2 . 
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In fact, for all x, Q(x) has a unique accepting configuration which it reaches 
with probability amplitude exactly {^) p ^ n ^ 2 /( 



x). 



Proof Sketch: We indicate the essential differences with the proof of 



Theorem 3.2, Now the basic states are |x,y, b) where x and y are as before 
and b is two bits. 

Initially, y = and b = 00. In Q's initial scan over the bits of y, apply 
the following local transition rule A to each bit: 

|0)_>i(3|0)+4|l» 

|l)~i(-4|0) + 3|l». 

If we let \z\i be the number of components of the vector z that have the 
value i, then transforming an arbitrary state \x,y,b) in this way yields 

\ x ^' h ) ^ -^E(- 4 ) |y '~ y| " 14ly ' _y|l3ly ' _y| ° l^y'' 6 > • 

5 y' 

Thus Q scanning the first m bits of the tape corresponds to the global 
transition 

|x,0,00) ^5> y |a;,y,00), 
y 

where 

3ly|o4|y|i 

a v = . 

y 5m 

Again Q simulates the deterministic computation of M on input (x, y) 
in a reversible manner. Let b y be 01 if M accepts, 10 if it rejects. Q sets 

b=by. 

The superposition is now 

|x,0,00) i ^ ^2a y \x,y,b y ), 
y 

Next, Q performs the transition A to the first bit of b y and then the tran- 
sition B given by 



| )_>i(4|0) + 3|l» 
|l)-^(-3|0)+4|l)). 
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to the second bit of b y . That is, Q applies 





" 12 


9 


16 


12" 


1 


-9 


12 


-12 


16 


25 


-16 


-12 


12 


9 




12 


-16 


-9 


12. 



to by. Finally, Q repeats the scan it performed at the beginning, using the 
same local transformation rule (A) on the m bits of y. This leads Q into a 
new superposition 

IV') = a (y>y') P( b y b ') k,y', &/ ); 



K2m+2 

y y',V 



where 



a(y,y') = (— 4)ly'-yl-i+ly- l-i4 |y ' _y|l+|y_0|l 3 |y ' _y|o+|y_0| ° , 
0(y,y') = 25 ■ T y y . 

We now consider the coefficient of \x, 1, 01) in \tp): 

(x,o,i | ip) = ^4i 1 -yi i+ iy- i i 3i 1 - y i o+ i y -°i o /3(6 y ,oi) 

y 

= ^El2 |1 -° l W y ,01) 
y 

12 r 



^/3(6 y ,01) 



25 m+1 
12 m 

Finally, Q deterministically looks at the m + 2 bits of the tape t. If it sees 
1,01 it accepts; otherwise, it rejects. 

Thus \x, 1,01) is the unique accepting configuration of Q, and it has 
probability amplitude 

(§r + 7(*) , 

which implies the theorem by setting p{n) = 2m + 2 = 2n k + 2. q 
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